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Top Stories 

• Rembrandt Enterprises confirmed May 16 that 2 million chickens at its Renville, 
Minnesota farm will be destroyed over the course of 4 weeks after tests produced a 
presumptive positive result for the bird flu - Minneapolis Star Tribune (See item 

• More than 100,000 gallons of raw sewage spilled at into the Monterey Bay at Lovers Point 
in California May 18 prompting the closure of all beaches 1 mile north and south Lovers 
Point Beach. - KSBW 8 Salinas (See item 15 ) 

• An Arkansas doctor was charged May 18 after discovering 187 fake prescriptions at his 
office amounting to nearly 17,000 oxycodone pills that were filled and distributed 
throughout Lonoke County since July 2014.- KTHV 11 Little Rock (See item W) 

• Lederal officials arrested a Chinese professor May 16 for allegedly taking part in an 
economic espionage scheme involving another Chinese professor and 4 other Chinese 
nationals in the purported theft of sensitive radio frequency technology developed by 2 
U.S. companies.- USA Today (See item 18 ) 
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Energy Sector 



1 . May 19, Asheville Citizen-Times - (North Carolina) Dukes plans to retire Ashville 
coal plant, replace with natural gas. Duke Energy officials announced May 19 that its 
Asheville coal-fired plant at Lake Julian will be retired and replaced with a natural gas- 
powered plant by 2019 in order to improve gas prices and reduce effects on the 
environment. 

Source: http://www.citizen-times.eom/storv/news/local/2015/05/19/duke-plans-retire- 
asheville-coal-plant/2757 1 083/ 
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Chemical Industry Sector 

Nothing to report 
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Nuclear Reactors, Materials, and Waste Sector 

Nothing to report 
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Critical Manufacturing Sector 

2. May 19, Car Connection - (National) 2004 - 2006 Nissan Sentra, 2004 Pathfinder 
added to Takata recall: over 263,000 vehicles affected. Nissan Motor Company Ltd., 
issued an expansion for an existing recall May 19 to include 263,692 model year 2004 
- 2006 Sentra and 2004 Pathfinder vehicles in the U.S. due to an issue with passenger- 
side, Takata Corp., -manufactured air bags that could cause them to inflate prematurely 
or explode, increasing the risk of crash and injury. 

Source: http://www.thecarconnection.com/news/1098370 2004-2006-nissan-sentra- 
2004-pathfinder-added-to-takata-recall-over-263000-vehicles-affected 
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Defense Industrial Base Sector 

See item 18 
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Financial Services Sector 

3. May 18, WMAQ 5 Chicago - (Illinois) Thieves use skimmer to get away with 
$50,000 from Lincolnwood ATM. Lincolnwood police are searching for 2 suspects 
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who allegedly placed skimming devices on an ATM at a BMO Harris Bank in Chicago 
and stole at least $50,000 from bank customers since April 26. A similar incident in 
January cost bank customers $70,000, and bank officials reported that all affected 
accounts will be fully reimbursed. 

Source: http ://w w w . nbcchic ago . com/new s/local/lincoln wood- atm- skim- 



304 162201.html 



4. May 18, WBIR 10 Knoxville - (Tennessee) Accused ‘ghost employee’ pleads guilty to 
bank fraud. A man described by authorities as a former “ghost employee” of the Knox 
County Trustee’s Office pleaded guilty May 18 for allegedly conspiring with 2 others 
to file false loan applications to defraud Bank of America, SmartBank, and Pinnacle 
National Bank of over $6.7 million, which they used for personal expenses. The man 
also faces separate charges for receiving pay for work for a former trustee that he did 
not do. 

Source: http://www.wbir.eom/storv/news/2015/05/18/rav-mubarak-plea/27542305/ 

5. May 18, Krebs on Security - (National) St. Louis Federal Reserve suffers DNS 
breach. The St. Louis Federal Reserve reported that hackers hijacked its domain name 
servers (DNS’) April 24 and redirected a portion of the bank’s online traffic to rogue 
sites resembling portions of its research.stlouisfed.org Web site. The bank 
recommended that potentially affected users change login information that could have 
been compromised in the attack. 

Source: http://krebsonsecuritv.eom/2015/05/st-louis-federal-reserve-suffers-dns-breach/ 
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Transportation Systems Sector 

6. May 19, WMAQ 5 Chicago - (Illinois) Semi fire closes southbound lanes on 1-394. 
Southbound lanes of Interstate 394 in Glenwood reopened after being closed for more 
than 3 hours May 19 while HAZMAT crews cleared the scene after a semi-truck 
hauling eight 55-gallon drums of deoxidizer caught on fire. No injuries were reported. 
Source: http://www.nbcchicago.com/traffic/transit/Semi-Fire-Closes-Southbound- 
Lanes-on-I-394-304221761.html 

7. May 18, KCBS 2 Los Angeles - (California) Semi truck carrying shattered glass 
overturns on freeway in Boyle Heights. All lanes of the East Lost Angeles 
Interchange in Boyle Heights were closed for approximately 5 hours May 1 8 while 
authorities investigated and cleaned up after a semi-truck hauling thousands of pounds 
of shattered glass overturned after colliding with a vehicle, spilling the load onto the 
roadway. One person was reported injured. 

Source: http://losangeles.cbslocal.eom/2015/05/18/semi-truck-carrving-glass-overtums- 
on-freeway-in-boyle-heights/ 

8. May 18, Associated Press - (Illinois) Freight train derailment near Joliet Amtrak 
station causes delays. A Union Pacific spokesperson reported that 2 cars from a freight 
train derailed south of the Joliet Amtrak station, causing delays for approximately 8 
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hours for passengers traveling between St. Louis and Chicago May 17. Charter buses 
were brought in to take passengers to their destination 

Source: http://www.chicagotribune.com/news/ct-illinois-freight-train-derailment- 
20150518-storv.html 



9. May 18, Orange County Register - (CaMomm) SigAlert: trash truck overturns on 
Ortega Highway; both directions closed near Antonio Parkway. Ortega Highway 
near Antonio Parkway was closed for several hours May 18 while crews cleared the 
scene after a trash truck overturned. No one was injured in the crash. 

Source: http://www.ocregister.com/articles/truck-662203-parkwav-ortega.html 

10. May 18, KABC 7 Los Angeles - (California) Hawaiian airlines plane makes 
emergency landing at LAX. A Hawaiian Airlines plane headed to Honolulu returned 
shortly after take-off to Los Angeles International Airport as a precaution after an 
indicator light came on in the cockpit due to an open fuel jettison valve, prompting an 
emergency landing May 18. The flight had already been delayed by 2 hours due to a 
fuel leak, and passengers continued their flight after maintenance crews checked the 
plane. 

Source: http://abc7.com/news/hawaiian-airlines-plane-makes-emergency-landing-at- 
lax/729740/ 
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Food and Agriculture Sector 

11. May 18, Food Safety News - (Washington; California; Massachusetts) Veal recalled 
after positive test for E. Coli 0157:H7. Washington-based ZYK Enterprises 

Inc., recalled 2,522 pounds of boneless veal trim and whole-veal muscle cut products 
May 18 due to potential contamination with E. coli 0157:H7, after Eood Safety and 
Inspection Service investigators found records of a positive test result May 15. The 
product was shipped to wholesale stores in California, Massachusetts, and Washington. 
Source: http://www.foodsafetvnews.eom/2015/05/veal-recalled-after-positive-test-for- 
e-coli-ol57h7/ 

12. May 18, Clayton News Daily - (Georgia) Firefighters on scene at ammonia leak at 
Fresh Express in Morrow, avoid the area. About 400 workers were evacuated May 
18 from the Fresh Express plant in Morrow, Georgia, due to an ammonia leak that 
prompted a HAZMAT response. Crews worked to contain the leak to one room and 
officials were unsure when the building would be safe for re-entry. 

Source: http://www.news-dailv.com/news/2Q 1 5/mav/l 8/firefighters-on-scene-at- 
ammonia-leak-at-fresh/ 

13. May 16, Minneapolis Star Tribune - (Minnesota) Renville chicken farm suffers 
Minnesota's worst bird-flu toll. Rembrandt Enterprises confirmed May 16 that 2 
million chickens at its Renville, Minnesota farm will be destroyed over the course of 4 
weeks after tests produced a presumptive positive result for the bird flu. Officials 
reported that only one barn holding around 250,000 hens was contaminated, and that 
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the operation’s entire flock will be culled as precaution. 

Source: http://www.startribune.com/renville-chicken-farm-suffers-minnesota-s-worst- 
bird-flu-toll/3040 11571/ 



14. May 16, U.S. Department of Agriculture - (Pennsylvania) A.S.K. Foods, Inc. recalls 
herb stuffing with pork and veal product due to misbranding and an undeclared 
allergen. The Food Safety and Inspection Service announced May 16 that A.S.K. 
Foods Inc., issued a recall of approximately 414 pounds of Wegman’s branded ground 
stuffing products due to undeclared soy and misbranding. The product was distributed 
to Wegman’s Grocery stores in Pennsylvania. 

Source: http://www.fsis.usda.gov/wps/portal/fsis/topics/recalls-and-public-health- 
alerts/recall-case-archive/archive/20 1 5/recall-078-20 1 5-release 
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Water and Wastewater Systems Sector 

15. May 18, KSBW 8 Salinas - (California) Lovers Pint sewage leak fixed after 6-hour 
spill. More than 100,000 gallons of raw sewage spilled at into the Monterey Bay at 
Lovers Point in Pacific Grove May 18 after a plug valve failed while Monterey 
Regional Water Pollution Control Agency workers performed maintenance at a nearby 
pump station, prompting the closure of all beaches 1 mile north and south Lovers Point 
Beach. Crews fixed the valve and reverse emergency calls were made to residents 
warning of water usage. 

Source: http ://w w w.ksb w .com/news/ 1 00000- gallons-of-raw-sewage-spills-into-ocean- 
at-lovers-point/33088136 
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Healthcare and Public Health Sector 

16. May 18. KTHV 11 Little Rock - (Arkansas) Doctor charged with 187 counts held in 
lieu of $50K bond. Authorities arrested and charged a Little Rock doctor May 18 after 
discovering 187 fake prescriptions at his office amounting to nearly 17,000 oxycodone 
pills with a street value of $505,000 that were filled and distributed throughout Lonoke 
County since July 2014. Detectives took the doctor into custody after learning that a 
drug overdose was connected to a fraudulent prescription written by the doctor. 

Source: http://www.thvll.eom/storv/news/crime/2015/05/18/little-rock-doctor- 
charged-with- 1 87-counts-of-fraudulent-practices/27535763/ 

17. May 16, Cleveland Plain Dealer - (Ohio) MetroHealth reports data breach for 981 
heart patients due to malware. Cleveland-based MetroHealth System notified 981 
patients May 15 who received heart catheterization procedures at the hospital that their 
protected health information may have been breached after malware was discovered on 
3 computers in the hospital’s Cardiac Cath Lab. An investigation determined that a 
business associate disabled antivirus software on the computers during an update, and 
the hospital announced that it removed the malware and backdoor access. 
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Source: 

http://www.cleveland.com/healthfit/index.ssf/2015/Q5/metrohealth reports data breac. 
html 



r Return to top i 



Government Facilities Sector 

18. May 19, USA Today - (International) Chinese professors among 6 charged with 
economic espionage. Federal officials arrested a Chinese professor May 16 for 
allegedly taking part in an economic espionage scheme involving another Chinese 
professor and 4 other Chinese nationals in the purported theft of sensitive radio 
frequency technology developed by 2 U.S. companies. The professors created a plan to 
obtain trade secret information on film bulk acoustic resonator (FBAR) technology, 
which is used to filter incoming and outgoing wireless signals in mobile phones, and 
solicit the information to Chinese universities and other interests in an effort to begin 
manufacturing the technology in China. 

Source: http://www.usatodav.eom/storv/news/nation/2015/05/19/china-espionage- 
technology/27570735/ 

19. May 18, WTOK 11 Meridian - (Mississippi) Four buses involved in accident in 
Neshoba County. One bus driver and 38 students were transported to area hospitals 
with minor injuries following a chain-reaction crash involving 4 buses in Neshoba 
County May 18. 

Source: http://www.wtok.com/home/headlines/Four-Buses-Involved-in-Accident-in- 
Neshoba-County-304 194 161 .html 

For additional stories, see items 5 and 20 
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Emergency Services Sector 

20. May 19, Associated Press - (National) U.S. President restricts police military gear, 
says it can alienate. The U.S. President issued an order May 18 that restricts the 
Federal transfer of some militarized gear to local law enforcements nationwide, 
including tracked armored vehicles, grenade launchers, and weaponized aircraft and 
vehicles, among other combat-style gear. The order also requires police to get approval 
from their city council, mayor, or some local governing body in order to obtain military 
equipment. 

Source: http://www.wbtv.com/storv/29088838/obama-puts-stricter-controls-on- 
military-style-for-police 
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Information Technology Sector 



21. May 19, - (International) Attackers use trojanized version of PuTTY 

to steal SSH credentials. Security researchers at Symantec discovered that actors are 
using a malicious version of the PuTTY open-source secure shell (SSH) software to 
access systems remotely and steal data by copying secure server connection info and 
login details to be sent to an attacker-controlled server. The software bypasses common 
firewalls and security products due to its whitelisted status and used by system and 
database administrators and web developers. 

Source: http://www.securitvweek.com/attackers-use-trojanized-version-puttv-steal-ssh- 
credentials 



22. May 19, Securityweek - (International) Address bar spoofing bugs found in Safari, 
Chrome for Android. Security researchers identified address bar vulnerabilities in the 
Safari and Chrome for Android Web browsers in which attackers could leverage Web 
page reloads via the setlnterval() function in Safari and a problem in how Chrome 
handles 204 ‘No Content’ responses to render spoofed Web pages. 

Source: http://www.securitvweek.com/address-bar-spoofing-bugs-found-safari-chrome- 
android 



For another story, see item 5 



Internet Alert Dashboard 



To report cyber infrastructure incidents or to request information, please contact US-CERT at soc@us-cert.gov or 
visit their Web site: http://www.us-cert.gov 

Information on IT information sharing and analysis can be found at the IT ISAC (Information Sharing and 
Analysis Center) Web site: http://www.it-isac.org 
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Communications Sector 

See item 18 
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Commercial Facilities Sector 



23. May 19, WTVJ 6 Miami - (Florida) 1 hurt, dozens evacuated in Opa-locka 
apartment fire. Dozens of residents from a 120-apartment complex in Opa-locka, 
Florida, were evacuated May 19 and 1 woman sent to an area hospital due to candle fire 
that overflowed in a first-floor apartment displacing 57 residents. One building of the 
complex housing 21 units was condemned due to the fire. 

Source: http://www.nbcmiami.com/news/local/l-Hurt-Dozens-Evacuated-in-Qpa- 
locka- Apartment-Fire-3042 17911 .html 
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24. May 19, KCTV 5 Kansas City - (Missouri) One dead after flames tear through 
Liberty apartment complex. A May 19 fire at the Jefferson Park Apartments in 
Liberty, Missouri, left 1 person dead and displaced 34 residents. Authorities are 
investigating the cause of the fire. 

Source: http://www.kctv5.com/storv/29099193/one-person-dies-in-libertv-apartment- 
fire 

25. May 19, KNTV 11 San Jose - (California) 4-alarm fire at auto shop sparks 
“chemical soup”: San Jose fire. Approximately 100 firefighters put out a 4-alarm fire 
May 19 at a San Jose auto detailing shop where toxic chemicals, possibly containing 
sulfuric acid, spilled out of the building shutting down the surrounding area. The 
firefighters were all decontaminated and HAZMAT crews worked to determined nature 
of the chemicals. 

Source: http://www.nbcbavarea.com/news/local/4-Alarm-Fire-at-Auto-Shop-Sparks- 
Chemical-Soup-San-Jose-Fire-304241681.html 

26. May 18, KMBC 9 Kansas City - (Kansas) Electrical short blamed in Olathe business 
fire. A May 17 fire caused by an electrical short in an extension cord caused $1 million 
in damages to the Olathe T-Shirt and Trophy store in Kansas. The owner hoped to work 
out of a temporary location while the store is rebuilt. 

Source: http://www.kmbc.com/news/olathe-tshirt-companv-badly-damaged-in- 
ovemight- fire/33077894 
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Dams Sector 



Nothing to report 
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Department of Homeland Security (DHS) 

DHS Daily Open Source Infrastructure Report Contact Information 



About the reports - The DHS Daily Open Source Infrastructure Report is a daily [Monday through Friday] 
summary of open-source published information concerning significant critical infrastructure issues. The DHS Daily 
Open Source Infrastructure Report is archived for 10 days on the Department of Homeland Security Web site: 
http://www.dhs.gov/IPDailvReport 

Contact Information 

Content and Suggestions: Send mail to cikr.productfeedback@hq.dhs.gov or contact the DHS 

Daily Report Team at (703) 942-8590 

Subscribe to the Distribution List: Visit the DHS Daily Open Source Infrastructure Report and follow 

instructions to Get e-mail updates when this information changes . 

Removal from Distribution List: Send mail to support® govdeliverv.com . 



Contact DHS 

To report physical infrastructure incidents or to request information, please contact the National Infrastructure 
Coordinating Center at nicc@hq.dhs.gov or (202) 282-9201. 

To report cyber infrastructure incidents or to request information, please contact US-CERT at soc@us-cert.gov or visit 
their Web page at www.us-cert.gov . 

Department of Homeland Security Disclaimer 

The DHS Daily Open Source Infrastracture Report is a non-commercial publication intended to educate and inform 
personnel engaged in infrastructure protection. Further reproduction or redistribution is subject to original copyright 
restrictions. DHS provides no warranty of ownership of the copyright, or accuracy with respect to the original source 
material. 
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